e74b747edc20257de61f80c5b9ee8abee8b2f5eeae2dc02e0b0447dd1e3dd062

Sharing

Copy URL Twitter E-mail

General

Target

e74b747edc20257de61f80c5b9ee8abee8b2f5eeae2dc02e0b0447dd1e3dd062
Size

113KB
MD5

f0049887d0f4d0b5e1772d67b2b1e9ba
SHA1

19164c7168b9fae6ede3dafdd9adeeb9f2639345
SHA256

e74b747edc20257de61f80c5b9ee8abee8b2f5eeae2dc02e0b0447dd1e3dd062
SHA512

c28870cdcb684f24ebd715a0794d03459d2191c4704088823d6ed94e5d218751eb27d4b3fb17b13e17c153b186b8caa9496ad1f964d8fa58670c9b46cb769ae1
SSDEEP

3072:Eirat2b/8fnrxMcfm7PHmzOOU+McCNXHFh:8ZScOOOJ7cSX

Score

N/A

Malware Config

Signatures

Files

e74b747edc20257de61f80c5b9ee8abee8b2f5eeae2dc02e0b0447dd1e3dd062
.exe windows x86

db61f1094a0d34450644d0d14c9a2894

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA
PathIsDirectoryA
SHQueryInfoKeyA
SHStrDupA
PathIsContentTypeA
SHDeleteKeyA
SHQueryValueExA

msvcrt

memmove
log
memcpy

kernel32

GetLastError
SetFilePointer
ResetEvent
GetStringTypeA
VirtualQuery
HeapDestroy
GetDiskFreeSpaceA
VirtualFree
GetCurrentThread
HeapAlloc
Sleep
MoveFileExA
GetUserDefaultLCID
FormatMessageA
CloseHandle
LockResource
ExitThread
LoadLibraryA
CreateFileA
GetTickCount
GetStartupInfoA
SetThreadLocale
WideCharToMultiByte
EnterCriticalSection
SetErrorMode
LocalFree
DeleteFileA
GlobalAddAtomA
GetFullPathNameA
GetLocaleInfoA
ReadFile
WaitForSingleObject
VirtualAllocEx
SetEvent
GetCPInfo
GetFileType
SetHandleCount
FreeResource
GetFileAttributesA
GetVersionExA
GetCurrentProcessId
GetVersion
LocalReAlloc
lstrcpyA
HeapFree
lstrcatA
GetProcAddress
SetEndOfFile
LocalAlloc
GetLocalTime
lstrcmpA
GlobalFindAtomA
LoadResource
EnumCalendarInfoA
lstrcmpiA
InitializeCriticalSection
MoveFileA
GetModuleFileNameA
GetFileSize
GetCommandLineA
lstrcpynA
FindFirstFileA
GetProcessHeap
VirtualAlloc
GetEnvironmentStrings
FindClose
GetStdHandle
GetCurrentProcess
SizeofResource
ExitProcess
GlobalDeleteAtom
GetStringTypeW
GetOEMCP
WriteFile
GlobalAlloc
DeleteCriticalSection
FreeLibrary
GetModuleHandleA
CompareStringA
GetACP
LoadLibraryExA
GetSystemDefaultLangID
lstrlenA
GetCurrentThreadId
MulDiv
CreateEventA
FindResourceA
SetLastError
RaiseException
GetDateFormatA

user32

CreateIcon
GetWindowTextA
DispatchMessageW
ShowOwnedPopups
SetCapture
LoadIconA
GetMenuState
PeekMessageW
MapWindowPoints
PostQuitMessage
DrawMenuBar
GetKeyState
DrawEdge
MapVirtualKeyA
GetWindowLongA
GetLastActivePopup
WaitMessage
EnumThreadWindows
SystemParametersInfoA
EndPaint
RemoveMenu
SetScrollInfo
GetKeyboardType
DestroyCursor
SetFocus
CallNextHookEx
SetScrollRange
SetParent
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetScrollPos
GetClassLongA
ScreenToClient
IsChild
GetDlgItem
InflateRect
SetPropA
GetCursor
SetMenuItemInfoA
SetWindowTextA
IsWindowUnicode
GetClassInfoA
ClientToScreen
AdjustWindowRectEx
CreatePopupMenu
DrawTextA
GetDC
PtInRect
CreateWindowExA
DefWindowProcA
GetClipboardData
WindowFromPoint
PostMessageA
GetMenuStringA
IsWindowVisible
GetMessagePos
SetWindowPos
GetFocus
CloseClipboard
RegisterWindowMessageA
LoadBitmapA
ActivateKeyboardLayout
UnregisterClassA
SetWindowsHookExA
SetTimer
GetWindowLongW
ScrollWindow
GetMenu
GetWindowThreadProcessId
DefFrameProcA
UnhookWindowsHookEx
OemToCharA
GetDesktopWindow
PeekMessageA
EqualRect
SetClassLongA
SetScrollPos
GetSystemMenu
SetCursor
GetSystemMetrics
CharToOemA
MessageBeep
GetWindowRect
IsRectEmpty
GetMenuItemInfoA
IsDialogMessageA
SetWindowLongW
IsDialogMessageW
UpdateWindow
wsprintfA
LoadCursorA
CharNextA
GetScrollRange
ReleaseCapture
DestroyWindow
GetClientRect
GetWindowDC
CreateMenu
SetMenu
TranslateMDISysAccel
SetActiveWindow
GetKeyboardState
SetWindowPlacement
SetRect
DestroyIcon
TranslateMessage
GetKeyNameTextA
SetWindowLongA
FrameRect
InvalidateRect
CheckMenuItem
DrawAnimatedRects
SendMessageA
KillTimer
GetKeyboardLayoutNameA
GetActiveWindow
DrawIcon
RemovePropA
GetKeyboardLayoutList
MoveWindow
GetWindowPlacement
CharLowerBuffA
GetIconInfo
DrawFrameControl
InsertMenuA
GetDCEx
DeleteMenu
DrawIconEx
CallWindowProcA
GetTopWindow
IntersectRect
RegisterClipboardFormatA
GetForegroundWindow
EnumChildWindows
GetSysColorBrush
GetClassNameA
SetForegroundWindow
CharNextW
SendMessageW
OffsetRect
IsWindowEnabled
CharLowerA
IsIconic
GetPropA
GetScrollInfo
ShowScrollBar
IsWindow
MsgWaitForMultipleObjects
InsertMenuItemA
DestroyMenu
ChildWindowFromPoint
RegisterClassA
LoadKeyboardLayoutA
EnableWindow
EnableMenuItem
IsZoomed
DefMDIChildProcA
GetSysColor
OpenClipboard
GetCapture
TrackPopupMenu
GetParent
EmptyClipboard
SetClipboardData
EnumWindows
MessageBoxA
FindWindowA
ReleaseDC
GetCursorPos
DispatchMessageA
GetKeyboardLayout
ShowWindow
LoadStringA

comctl32

ImageList_Remove
ImageList_Destroy
ImageList_Add
ImageList_Create
ImageList_Write
ImageList_Draw

Sections

CODE
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db61f1094a0d34450644d0d14c9a2894

Headers

File Characteristics

Imports

shlwapi

msvcrt

kernel32

user32

comctl32

Sections

CODE Size: 100KB - Virtual size: 99KB

.data Size: 7KB - Virtual size: 7KB

DATA Size: 4KB - Virtual size: 4KB

CODE
Size: 100KB - Virtual size: 99KB

.data
Size: 7KB - Virtual size: 7KB

DATA
Size: 4KB - Virtual size: 4KB